1.

Self register for ServiceNow account

Visit the ServiceNow (Icon) web site at: https://support.virtustream.com/

Request account
On the logon page select the option to register for a ServiceNow account.

Enter the requested information and submit to create an account.

Wait for approval

You will receive an email to the email address given with confirmation or account creation with instructions on how to complete the registration.

If you don't receive your service now account in 1-2 business days then email servicenow.admins@virtustream.com.

(Important Note: ServiceNow (Icon) is not integrated with an other internal authentication directory service(s). So the password will be managed
separately.)
2. Request RCSNet VPN access
This step can be performed by the user or the user’s manager if the user has not
completed the steps in “1. Self register for ServiceNow account"

Log into the ServiceNow (Icon) site

Select the “Service Catalog” and then the “Catalog” option on the left frame.

On the center frame select the “NetOPs” option.

Select the “VPN Request (Add/Remove)” request type to create a VPN account request.

Filling out the form

On the next screen select the option for “New Account” from the Request Type drop down list.

For a basic account (no additional service lines) select “RCSNet Account” from the left panel and add it to the list using the “>” button.
(Note: Add additional service lines (for example VSC) to this list for additional VPN access. If unsure only select the default “RCSNet Account” as
this gives access to the most commonly requested services)

Fill out the user’s information accurately or this may cause an issue during account creation. (see example image for format)

Employee Name: “John Doe” (FirstName/GivenName LastName/SurName)

Employee EMC ID: “000000” (Employee Number/Badge Number)
EMC Username: “doej5” (EMC LDAP user logon)
Employee Position: “Sample Employee” (Job Title / Department)
Email Address: “john.doe@emc.com” (Main email address)

In the “Justification” portion of the form please add the following information:

Justification for account: Example: “Needed to access RCSNet resources”

 List any additional permissions or information needed to grant appropriate access: “Need access to: Jira and ROCC Confluence page”

Once all the information requested is filled out properly submit the request by clicking the “Submit Request” button on the right frame.

Wait for manager approval

Once the request has been submitted a request will be sent to the user's manager to be approved within Service Now before the team can
process the request.

The approval workflow must be followed. No exceptions.

Once the Request is approved an account will be created and a message will be sent to the user from the email address: Rubicon2fAdmin@emc.
com containing the following:

User logon Name.

Temporary password.
List of domains accounts were created for.
Next steps for requesting a RSA SecureID token.

Example email:
To: john.doe@example.com

Subject: [RCSNet] New account created for Doe, John

John,

A new RCSNet VPN account has been created for you. Your username is the same as your EMC Corporate account with the following
temporary password '**********' (no quotes).

If you do not have access to the RCSNet VPN, please follow these steps to request a VPN Pin and Token:
1. Login to the RSA Self Service Portal at https://self-service.emcrubicon.com with your EMC user name and the temporary password above.
2. Once in the Portal request a software token for your mobile device, iPhone and Android are supported. Please remember the PIN and CTF
URL password as they will be needed later.

Once the steps above are complete your request will be processed by an RCSNet Admin, you can expect an approval email within 1 business
day.
This email will contain additional steps to complete the RSA Pin+Token request and VPN process.

Additional Information:

VPN Client
If you do not currently have the Cicso AnyConnect VPN client installed on your computer, please go to one of the sites below and follow the
instructions on the page.
You will need to login using your EMC username and RSA Pin+Token combination created on the RSA Self Service Portal above.
RCSNet East = https://rmz-us-east.vs.services
RCSNet West = https://rmz-us-west.vs.services
RCSNet EU = https://rmz-eu-west.vs.services
 Once the Cisco AnyConnect VPN client is installed, launch it then enter in the nearest of the above hosts without the https:// in the Connect To
field and click connect.
When prompted use your EMC username and RSA Pin+Token combination as your credentials to complete the VPN connection.

Change Password
To change your password please connect to the RCSNet VPN then go to https://idm.core.rcsops.com

Additional Assistance
If you require additional assistance, feel free to ask your question in the #2fa_rcsnet Rubicon Slack channel and someone will assist as soon as
possible.

Thank You,
3. Request soft RSA SecureID token.
Once an account is created for RCSNet VPN access a request for a soft token will need
to be submitted by the user in order to set up two factor authentication.

Access the RSA self-service portal (Link supplied in account creation email notification https://self-
service.emcrubicon.com)

Log into the portal with the logon name supplied in the account request (EMC UserName) and the temporary password supplied in the account
creation notification email sent.

Request soft token

Once logged in select the option to “Request a new token”.

Only mobile devices are supported so select either “Android”, “iOS” or “WindowsPhone” from the list of devices.
Create a “Compressed Token Format (CTF) URL Password”. This password will be used when installing the soft token on the mobile device
selected above.

(NOTE: This is only used for the import token process if you forget this you will need to request a new token)

Create a new “PIN” for the requested device. This “PIN” will be used when connecting to the RCSNet VPN every time in the “PIN+TokenCode”
format.

Once the information above has been completed submit the request by clicking the “Submit” button at the bottom of the form.

An email will be sent by the system to confirm the request was submitted.

An administrator will review and either approve or deny the new token request.

Complete RSA SecureID token setup

Once a new token request has been approved by an administrator the user will receive an email containing a URL and steps to complete
registration.
In order to complete the registration on a mobile device the “RSA SecureID” application will need to be installed.

Open the “App store” on the device being used and search for “RSA SecureID” and install.

1. iOS Device - https://itunes.apple.com/us/app/rsa-securid-software-token/id318038618?mt=8

2. Android Device - https://play.google.com/store/apps/details?id=com.rsa.securidapp&hl=en
3. WindowsPhone Device - https://www.microsoft.com/en-us/store/p/rsa-securid/9nblggh0ccn2

Once the “RSA SecureID” application is installed open the “Compressed Token Format (CTF) URL” supplied in the token approval email
notification.

(Note: the link will have a local IP address (127.0.0.1) this is normal the URL and application will redirect to the RSA server)

Clicking on the CTF URL should launch the RSA SecureID application on the device and ask for a password to continue. This will be the the
Compressed Token Format (CTF) URL Password created during the token request process.

This completes the token registration on your mobile device. Opening the app on your device will now give a token number to be used along with
the “PIN” created with the token request in the “PIN+TokenCode” format when accessing the RCSNet VPN.

Connecting to VPN
After completing the registration type (or copy/paste) one of the below addresses into the Cisco AnyConnect client.

rmz-us-east.vs.services
rmz-us-west.vs.services
rmz-eu-west.vs.services

Click the Connect button and use the "PIN+TokenCode" set up in this guide.
4. Reset temporary password(s)
Summary:
To change passwords when it is the first time logging in or when a password is expiring.

These steps will reset your password for ALL assigned domains.

Requirements:

User Requirements:

1. User must already have an RCSNet (RMZ) VPN Account.

2. User must already be connected to the RCSNet (RMZ) VPN.
3. User must have a valid email address.

Password complexity Requirements:

Minimum of 7 characters containing characters from three of the following categories:

1. Uppercase letters (A through Z)

2. Lowercase letters (a through z)
3. Base 10 digits (0 through 9)
4. Non-alphanumeric characters (special characters ! " # $ % & ' ( ) * + , - . : ; < > ; ? @ [ ] ^ _ ` { | } ~ )

The password history will remember the last four passwords and not allow you to set the same one.

Steps:
Once connected to the RCSNet (RMZ) VPN browse to the following url: https://idm.core.rcsops.com

Once logged in you will be presented with your Home dashboard listing your account information.

Click on "Credentials" either on the Home dashboard or the navigation pane on the left hand side of the window.
Once on the "Credentials" page you can change your password by simply entering a new password and then confirming the new password and
clicking "Save".

You will be taken back to the "Home" dashboard if the change was successful, or presented with an error if one of the password requirements are
not met.

Updating your password will change it wherever available across ALL domains.